Need to implement token based auth so that we can stop relying on session state for auth. This will allow for cross origin use of the api.